VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
260322681229792
T:
jacfp127i
286842968432532
T:
prjfp127i
27372?29900?38619?
T:
kumjacfp127g
283403121635412
T:
hecfp127i
320363468038136
T:
jacfp128bk
372963787242984
T:
gls254
380683885642216
T:
prjfp128bk
396964032044704
T:
hecfp128bk
389284046044348
T:
hecfp128i
394924081646152
T:
hecfp128fkt
396924185647596
T:
curve2251
39188?44948?55801?
T:
gls254prot
427524586051864
T:
ecfp256e
460404690052956
T:
ecfp256h
492444964455020
T:
k277taa
475765025656580
T:
ecfp256s
492445220859248
T:
ecfp256q
564206016066372
T:
k298
67740?76840?94741?
T:
kummer
779487978087284
T:
gls1271
772608296488592
T:
k277mon
8338087092101004
T:
kumfp127g
129768138812147088
T:
kumfp128g
143060148684158532
T:
curve25519
148276157224169228
T:
sclaus1024
156640162228171620
T:
ed448goldilocks
186864193916209680
T:
ecfp256i
204784216908232992
T:
surf127eps
257884272796287728
T:
nistp256
259228281768307988
T:
hector
565652591500632640
T:
surf2113
741388772400825324
T:
sclaus2048
9342689631241001608
T:
ed521gs
102997610645121106360
T:
claus
108338011146041149096
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
359883604439780
T:
gls254
39052?42064?50968?
T:
gls254prot
490684948855320
T:
k277taa
559725962866236
T:
k298
675247229278292
T:
kummer
770488075288280
T:
k277mon
8515290880105056
T:
kumfp127g
96556102836111628
T:
jacfp128bk
102228?114052?148485?
T:
kumjacfp127g
117208119596130280
T:
prjfp128bk
121096126812139740
T:
hecfp128bk
125324131516142960
T:
hecfp128fkt
134324140924154044
T:
kumfp128g
142908146620159788
T:
curve25519
152128158608171456
T:
curve2251
156740164136176644
T:
jacfp127i
169276176968191200
T:
ecfp256e
181024188060203180
T:
ecfp256q
180904190312205816
T:
ecfp256i
184676191692208288
T:
prjfp127i
185224194360208960
T:
gls1271
190032196976210724
T:
hecfp127i
198780208560219792
T:
sclaus1024
199268208820222976
T:
surf127eps
209712216448233800
T:
ecfp256h
236312251884263532
T:
ecfp256s
271000283776294464
T:
hecfp128i
483692501188526128
T:
ed448goldilocks
564784585296620032
T:
surf2113
686372709612742932
T:
nistp256
878956915268959668
T:
hector
933432965796992184
T:
ed521gs
988660?1040948?1373022?
T:
sclaus2048
104506810649441098328
T:
claus
107884411128601141756
T:
nist521gs